https://sansec.io/research/magento-xml-backdoor